Bypassing Content Security Policy

🗓️ 26 Feb 2024 08:25:45Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

Google Chrome Content Security Policy vulnerability

Reporter	Title	Published	Views	Family All 302
FreeBSD	chromium -- multiple security fixes	20 Feb 202400:00	–	freebsd
AlpineLinux	CVE-2024-1672	21 Feb 202403:14	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of Google Chrome and Microsoft Edge’s Content Security Policy mechanism, which allows attackers to circumvent existing security restrictions	27 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-1672	21 Feb 202405:26	–	circl
CNNVD	Google Chrome 安全漏洞	20 Feb 202400:00	–	cnnvd
CNVD	Google Chrome Security Bypass Vulnerability (CNVD-2024-16936)	1 Mar 202400:00	–	cnvd
CVE	CVE-2024-1672	21 Feb 202403:14	–	cve
Cvelist	CVE-2024-1672	21 Feb 202403:14	–	cvelist
Debian	[SECURITY] [DSA 5629-1] chromium security update	23 Feb 202406:10	–	debian

Vulners

Node

chromium chromiumMatch88.0.4324.182-1debian

AND

chromium chromiumMatch83.0.4103.116-3.1debian

AND

debian debian_linuxMatch999

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r6os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r7os

AND

alpinelinux alpine_linuxMatch3.19

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r5os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r5os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r3os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r2os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r0os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r4os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r1os

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r1os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-1672
chromereleases	www.chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
issues	www.issues.chromium.org/issues/41485789
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/

19 Dec 2024 20:06Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.4

EPSS0.00881

SSVC